# Azure AI Foundry: Microsoft fixes a request forgery flaw server side

> CVE-2026-108456 is a server-side request forgery flaw in Azure AI Foundry that Microsoft says it has already fixed in the service.

- **Severity:** Low: Minor, hard to exploit or mostly theoretical. Good to know.
- **Category:** Vulnerability
- **Published by:** Microsoft
- **Disclosed:** 2026-10-22
- **CVE:** CVE-2026-108456
- **CVSS:** 7.7
- **Affects:** Azure AI Foundry
- **Research by:** Microsoft Security Response Center
- **Primary source:** https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108456
- **Page:** https://theinjection.dev/items/microsoft-azure-ai-foundry-ssrf/

Microsoft published CVE-2026-108456 on 22 October 2026, a server-side request forgery flaw in Azure AI Foundry that it scores 7.7. Microsoft states the hosted service is already fully mitigated and that customers need take no action.

## What happened

Microsoft disclosed CVE-2026-108456 in its 2026-Oct security update release on 22 October 2026, naming Azure AI Foundry, its platform for building and hosting AI applications. Microsoft is the assigning authority for the record and reports that the flaw was neither publicly disclosed nor exploited before the advisory. No outside researcher is named.

## How it works

Microsoft classes the weakness as CWE-918, server-side request forgery, and describes the effect as allowing an authorized attacker to elevate privileges over a network. The published vector, AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, describes a caller who already holds low privileges and needs no user interaction, with high impact on confidentiality, none on integrity or availability, and a change of scope. Microsoft publishes no further technical detail, so the request path and the endpoints it could reach are not described.

## Who is affected

Azure AI Foundry is the only product named, and the advisory lists no affected or patched version numbers because the service is hosted by Microsoft. Microsoft's own severity label on the record reads Critical even though the CVSS base score it publishes is 7.7, with a temporal score of 6.7.

## What to do

No customer action is required, because the advisory's FAQ states the flaw has already been fully mitigated by Microsoft. Treat this record as an inventory note for teams that track Azure AI Foundry, not as patching work.

## Quick facts

- **Affected:** Azure AI Foundry, the hosted service; no versions listed
- **Status:** Microsoft states it is already fully mitigated, with no customer action required
- **CVE:** CVE-2026-108456
- **CVSS:** 7.7 (v3.1) base and 6.7 temporal, assigned by Microsoft, which labels the record Critical
- **Attack type:** Server-side request forgery leading to elevation of privilege, CWE-918
- **Disclosed:** 22 October 2026, in the 2026-Oct release; Microsoft reports no prior public disclosure or exploitation

## Sources

1. [Microsoft Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108456)
2. [GitHub Advisory](https://github.com/advisories/GHSA-8v83-jpwp-qqr9)